Archive
January 2008
Vulnerabilities first published in this month (UTC), newest first.
261 results · Clear filters · Feed
-
Unscored —CVE-2008-0517 Public exploit
SQL injection vulnerability in index.php in the Darko Selesi EstateAgent (com_estateagent) 0.1 component for Mambo 4.5.…
-
Unscored —CVE-2008-0520 Public exploit
Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote at…
-
Unscored —CVE-2008-0521 Public exploit
Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to read arbitrary files vi…
-
Unscored —CVE-2008-0515 Public exploit
SQL injection vulnerability in index.php in the musepoes (com_musepoes) component for Mambo and Joomla! allows remote a…
-
Unscored —CVE-2008-0511 Public exploit
SQL injection vulnerability in index.php in the MaMML (com_mamml) component for Mambo and Joomla! allows remote attacke…
-
Unscored —
Eval injection vulnerability in admin/op/disp.php in Netwerk Smart Publisher 1.0.1 allows remote attackers to execute a…
-
Unscored —CVE-2008-0518 Public exploit
SQL injection vulnerability in index.php in the Recipes (com_recipes) 1.00 component for Mambo and Joomla! allows remot…
-
Unscored —CVE-2008-0514 Public exploit
SQL injection vulnerability in index.php in the Glossary (com_glossary) 2.0 component for Mambo and Joomla! allows remo…
-
Unscored —CVE-2008-0513 Public exploit
Directory traversal vulnerability in parser/include/class.cache_phpcms.php in phpCMS 1.2.2 allows remote attackers to r…
-
Unscored —CVE-2008-0510 Public exploit
SQL injection vulnerability in index.php in the Newsletter (com_newsletter) component for Mambo 4.5 and Joomla! allows …
-
Unscored —CVE-2008-0502 Public exploit
PHP remote file inclusion vulnerability in templates/Official/part_userprofile.php in Connectix Boards 0.8.2 and earlie…
-
Unscored —
include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processin…
-
Unscored —CVE-2008-0504 Public exploit
Multiple SQL injection vulnerabilities in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote authenticated admin…
-
Unscored —CVE-2008-0519 Public exploit
SQL injection vulnerability in index.php in the Atapin Jokes (com_jokes) 1.0 component for Mambo and Joomla! allows rem…
-
Unscored —CVE-2008-0507 Public exploit
SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute a…
-
Unscored —CVE-2008-0512 Public exploit
SQL injection vulnerability in index.php in the fq (com_fq) component for Mambo and Joomla! allows remote attackers to …
-
Unscored —CVE-2008-0493 Public exploit
fpx.dll 3.9.8.0 in the FlashPix plugin for IrfanView 4.10 allows remote attackers to execute arbitrary code via a craft…
-
Unscored —
Stack-based buffer overflow in the Persits.XUpload.2 ActiveX control in XUpload.ocx 3.0.0.4 and earlier in Persits XUpl…
-
Unscored —CVE-2008-0501 Public exploit
Directory traversal vulnerability in phpMyClub 0.0.1 allows remote attackers to include and execute arbitrary local fil…
-
Unscored —CVE-2008-0488 Public exploit
Directory traversal vulnerability in tseekdir.cgi in VB Marketing allows remote attackers to include and execute arbitr…
-
Unscored —CVE-2008-0496 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in AmpJuke 0.7.0 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2008-0497 Public exploit
Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2008-0489 Public exploit
Directory traversal vulnerability in install.php in Clansphere 2007.4.4 allows remote attackers to include and execute …
-
Unscored —CVE-2008-0498 Public exploit
SQL injection vulnerability in main_bigware_53.tpl.php in Bigware Shop 2.0 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-0487 Public exploit
Multiple SQL injection vulnerabilities in login.asp in ASPired2Protect allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-0490 Public exploit
SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers t…
-
Unscored —CVE-2008-0491 Public exploit
SQL injection vulnerability in fim_rss.php in the fGallery 2.4.1 plugin for WordPress allows remote attackers to execut…
-
Unscored —CVE-2008-0473 Public exploit
RTE_popup_save_file.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to upload (1) .html and (2) .htm files …
-
Unscored —CVE-2008-0478 Public exploit
Directory traversal vulnerability in index.php in SetCMS 3.6.5 allows remote attackers to include and execute arbitrary…
-
Unscored —CVE-2008-0468 Public exploit
SQL injection vulnerability in category.php in Flinx 1.3 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-0469 Public exploit
SQL injection vulnerability in index.php in Tiger Php News System (TPNS) 1.0b and earlier allows remote attackers to ex…
-
Unscored —CVE-2008-0480 Public exploit
Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrar…
-
Unscored —
A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the Execute…
-
Unscored —CVE-2008-0474 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 8.1 build 8100 allow remote at…
-
Unscored —CVE-2008-0481 Public exploit
Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to li…
-
Unscored —
Stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control in QMPUpgrade.dll 1.0.0.1 in Move Networks Upgr…
-
Unscored —CVE-2008-0479 Public exploit
Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbit…
-
Unscored —
Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote a…
-
Unscored —
Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 …
-
Unscored —CVE-2008-0466 Public exploit
Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02…